What is a business continuity plan (BCP) and its key components?

• A. Focuses solely on cybersecurity incident response.
• B. Ensures operations during disruptions; components include business impact analysis, recovery strategies, communications, and testing.
• C. Only documents contingency budgets.
• D. Replaces the need for disaster recovery planning.

Answer: (B)

A business continuity plan is a structured approach to keep essential operations running during and after a disruption, covering people, processes, technology, and facilities rather than focusing on a single area like cybersecurity or budgets. Its key components are a business impact analysis to identify which functions are critical and establish recovery objectives, recovery strategies that describe how operations will be restored, a communications plan for stakeholders, and testing to validate the plan and improve readiness. This combination ensures the organization can continue or quickly resume essential activities despite events that interrupt normal operations. The other options miss essential breadth: focusing only on cybersecurity ignores broader business needs; documenting budgets alone omits plans for maintaining operations and validating readiness; and treating disaster recovery as a replacement for BCP ignores that DRP is usually a part of the broader continuity effort, not its substitute.